Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
File:                     xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft (raw, json)
Hash identifier:          ZpLnnhPpqAM/XFXaY2lkCkFq/vqJbcb+lcbb2UAxiOI=
Subject key identifier:   C3:43:BD:33:24:F8:49:A8:3B:C0:13:6B:FF:EC:C4:59:9B:9A:49:5D
Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
Certificate issuer:       /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Certificate serial:       019A5074E53E5DBE1F47A963BF9CA31A5313
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
Manifest number:          1711
Signing time:             Tue 04 Nov 2025 20:00:29 +0000
Manifest this update:     Tue 04 Nov 2025 20:00:29 +0000
Manifest next update:     Wed 05 Nov 2025 20:00:29 +0000
Files and hashes:         1: 2FnxWjtwh7KFv_hykkrSOYGbvY4.roa (hash: lHqB/84b/tnNxb+0w+5WU9XioMN+I/3MvGDQZ2GLdEw=)
                          2: ajuoeFVs3Wv6piEKCQm-YDbacGU.roa (hash: uiCyFTO1It1gDM/Wfhrrlyxb4WrD3apKehfP5R4U3W0=)
                          3: bMNPQ0JvZwzx-pZYER1G_knAfSg.roa (hash: W+fVC2UnLIyGTc4qX8q7TadCkeRxz6sUHiIjTmi3R8k=)
                          4: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl (hash: nzmV8diVSx1t7LzMf6s13EXBCKSpJprxI145RXeWs/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:74:e5:3e:5d:be:1f:47:a9:63:bf:9c:a3:1a:53:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
        Validity
            Not Before: Nov  4 20:00:29 2025 GMT
            Not After : Nov  5 20:00:29 2025 GMT
        Subject: CN=c343bd3324f849a83bc0136bffecc4599b9a495d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a9:01:14:c8:20:c6:af:74:14:94:34:d8:38:
                    c4:9f:74:ab:7e:18:f6:26:a8:f3:72:ba:9a:e5:9b:
                    96:46:af:dc:30:93:b9:47:9f:13:33:2e:b4:87:bd:
                    30:ac:30:2a:34:ef:9f:ae:75:e2:6d:fb:c5:80:11:
                    86:46:f1:e4:2b:7a:e5:8f:cf:a9:13:d2:36:e4:82:
                    9d:83:a1:82:0d:f8:40:1b:5b:05:1d:50:df:10:8b:
                    45:2e:bd:b1:ae:bc:66:d6:7f:e0:79:9f:25:90:de:
                    86:44:2c:f7:09:79:e5:2a:1d:d0:15:03:0b:34:76:
                    0b:a3:cd:04:d5:c9:e2:9b:8b:15:b8:82:0c:ed:24:
                    3f:8f:73:92:e6:1c:b2:02:a5:79:03:dd:56:65:27:
                    30:65:c6:31:5c:00:8e:fc:fc:bd:54:51:2f:12:52:
                    e3:4a:ac:5c:e5:15:ca:e4:cd:55:2d:05:94:15:82:
                    24:1b:2f:0b:3f:27:06:68:ae:8f:18:a3:10:5f:96:
                    a8:41:10:c5:8c:1f:0f:39:4a:c7:80:2a:dc:4f:d5:
                    30:56:1e:80:2c:01:b5:2d:d1:da:33:87:d8:80:d9:
                    1e:26:f0:3c:c0:a0:16:75:97:ba:d1:1c:f1:d2:71:
                    74:d3:2e:4d:bc:32:97:e8:3f:65:13:b9:db:d0:36:
                    09:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:43:BD:33:24:F8:49:A8:3B:C0:13:6B:FF:EC:C4:59:9B:9A:49:5D
            X509v3 Authority Key Identifier:
                keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:2b:c0:69:4a:8e:ac:a6:79:33:d2:be:a6:51:ef:fa:dd:a6:
         16:f2:56:80:b6:3b:28:70:12:99:9c:32:81:ba:70:8b:ea:08:
         e3:ac:89:8e:35:f2:6c:35:f6:c0:54:a8:d6:9e:5c:80:58:84:
         96:df:05:53:b1:3c:26:b4:6b:6f:55:6e:d1:c9:72:79:c3:0f:
         e7:c0:c8:6e:dc:a5:78:07:a8:49:67:10:f1:85:d5:7e:84:c8:
         2c:50:a0:39:21:9f:bf:f1:f7:85:50:73:af:6e:99:f3:3d:69:
         24:59:9c:63:7e:53:eb:c4:a2:f2:1e:36:25:21:4c:0d:5c:5b:
         85:fa:b9:aa:cd:33:dd:59:32:47:55:d6:bb:c3:a3:7a:ae:1a:
         b4:88:02:30:b3:a6:94:db:e6:b9:82:b6:b0:ca:a0:03:76:18:
         1c:eb:d8:50:c2:0b:67:1f:62:fb:34:5a:a4:a6:8a:80:cc:61:
         f1:7b:1e:0a:c1:32:fc:91:e6:7d:43:9f:9d:ff:49:ad:a3:9e:
         5b:3b:a9:82:e4:15:86:aa:b0:3b:31:7f:7a:ab:cd:92:ff:ca:
         16:9c:88:d6:2e:3b:e2:40:61:ef:71:82:1c:d0:10:96:98:66:
         b3:f9:77:e7:66:e2:c1:e5:47:8c:af:d7:49:26:ee:1a:dc:21:
         72:af:74:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:05:08 2025 by rpki-client